This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Ca0jUIwklC0eyPP5hzRAn17FR80.roa File: Ca0jUIwklC0eyPP5hzRAn17FR80.roa (raw, json) Hash identifier: fAEP7LfFj7fDAZrrdBBsvg+Mn25B+1e7F/BBuqO131w= Subject key identifier: 09:AD:23:50:8C:24:94:2D:1E:C8:F3:F9:87:34:40:9F:5E:C5:47:CD Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E380930FB7F7B71731708080128EC2C Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Ca0jUIwklC0eyPP5hzRAn17FR80.roa Signing time: Fri 02 Jan 2026 10:19:20 +0000 ROA not before: Fri 02 Jan 2026 10:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52000 IP address blocks: 193.38.235.0/24 maxlen: 24 2a0a:2880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:09:30:fb:7f:7b:71:73:17:08:08:01:28:ec:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09ad23508c24942d1ec8f3f98734409f5ec547cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fb:10:84:ae:ff:c3:e1:7b:53:2a:8e:a0:e9: e8:d8:3d:ae:cc:84:5b:a7:38:d1:3d:bf:72:32:f1: cf:94:71:12:f5:fd:b6:60:3f:78:9b:8e:32:77:fa: ad:44:57:e4:81:d6:94:d9:5d:a2:93:2e:14:d7:67: 1d:13:a4:1e:c8:ab:80:86:5c:f0:18:68:d1:ac:b8: 36:33:63:d2:a0:1e:44:1e:26:7f:25:c4:f2:32:a9: 4d:1b:4a:e1:98:c9:12:f4:71:69:9e:dd:3b:c4:38: 19:15:eb:36:57:1e:fb:38:74:2d:af:c0:90:65:d9: 17:9d:52:bd:ce:c7:29:ce:ab:45:9b:5b:af:be:a0: a0:f3:2b:a5:b4:95:0c:56:df:95:ae:05:f9:d0:e2: ca:20:a5:62:46:c9:95:53:ac:a9:7e:55:eb:f1:f8: ff:25:e2:99:fa:25:c8:23:03:4d:13:00:7e:fc:f7: ef:df:ad:29:df:d1:2b:4d:67:fa:3e:a8:c3:9a:d0: 21:87:f8:7f:2b:8b:e4:e2:57:2f:78:9e:0e:55:f6: ce:08:de:fd:73:a3:c4:bf:13:33:9d:cc:df:8d:f1: 62:de:e8:01:14:19:d4:b2:86:8e:2c:48:b7:fc:c7: eb:0a:76:92:78:d8:dc:f3:8e:e3:b8:b5:72:79:13: e9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AD:23:50:8C:24:94:2D:1E:C8:F3:F9:87:34:40:9F:5E:C5:47:CD X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Ca0jUIwklC0eyPP5hzRAn17FR80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.235.0/24 IPv6: 2a0a:2880::/29 Signature Algorithm: sha256WithRSAEncryption 25:9c:7f:2d:17:39:17:de:86:25:85:90:29:41:9b:65:03:f7: ad:01:e1:4b:c4:58:5c:a7:d0:6f:6c:9e:c5:7b:4a:48:a9:5c: f6:4a:41:13:1a:5f:ec:da:97:62:3f:46:13:91:ae:a7:85:5a: 38:59:2b:b6:b6:71:6b:bc:e0:3d:6e:33:d7:8f:cc:cd:48:62: d1:2d:82:19:50:d2:af:a5:fc:b9:0a:50:17:8c:1b:b6:c7:f2: b9:a0:9a:fc:59:40:62:8b:42:6e:74:7f:cc:a3:75:52:60:d1: 36:6b:84:d5:d5:93:32:0d:76:97:ea:8c:48:e7:13:fb:88:5b: a6:31:e2:bc:34:0a:62:81:15:77:00:a1:ff:55:33:52:39:bd: 13:24:1d:07:08:32:41:f2:e6:be:8f:85:a1:c4:69:0b:88:ec: 97:0b:c2:a5:05:27:e3:12:7b:3d:f0:3c:3e:09:23:fe:42:94: 13:1a:61:f9:5d:02:0b:05:c3:1f:51:34:10:3f:c6:b9:8a:fe: e8:36:00:30:7b:49:a3:f8:73:b8:fb:4c:86:1e:8a:c4:4a:e7: ec:54:aa:cc:73:c3:b9:30:8b:48:08:e6:f3:c5:d7:dd:be:d2: ec:4a:80:fb:32:c7:bb:be:81:dd:6c:f8:f1:35:f5:c5:5d:05: cb:3f:e8:bc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OAkw+397cXMXCAgBKOwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWFkMjM1MDhjMjQ5NDJkMWVjOGYzZjk4NzM0NDA5ZjVlYzU0N2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/sQhK7/w+F7UyqOoOno2D2uzIRb pzjRPb9yMvHPlHES9f22YD94m44yd/qtRFfkgdaU2V2iky4U12cdE6QeyKuAhlzw GGjRrLg2M2PSoB5EHiZ/JcTyMqlNG0rhmMkS9HFpnt07xDgZFes2Vx77OHQtr8CQ ZdkXnVK9zscpzqtFm1uvvqCg8yultJUMVt+VrgX50OLKIKViRsmVU6ypflXr8fj/ JeKZ+iXIIwNNEwB+/Pfv360p39ErTWf6PqjDmtAhh/h/K4vk4lcveJ4OVfbOCN79 c6PEvxMznczfjfFi3ugBFBnUsoaOLEi3/MfrCnaSeNjc847juLVyeRPphQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAmtI1CMJJQtHsjz+Yc0QJ9exUfNMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvQ2EwalVJd2tsQzBleVBQNWh6UkFuMTdGUjgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSbrMA0E AgACMAcDBQMqCiiAMA0GCSqGSIb3DQEBCwUAA4IBAQAlnH8tFzkX3oYlhZApQZtl A/etAeFLxFhcp9BvbJ7Fe0pIqVz2SkETGl/s2pdiP0YTka6nhVo4WSu2tnFrvOA9 bjPXj8zNSGLRLYIZUNKvpfy5ClAXjBu2x/K5oJr8WUBii0JudH/Mo3VSYNE2a4TV 1ZMyDXaX6oxI5xP7iFumMeK8NApigRV3AKH/VTNSOb0TJB0HCDJB8ua+j4WhxGkL iOyXC8KlBSfjEns98Dw+CSP+QpQTGmH5XQILBcMfUTQQP8a5iv7oNgAwe0mj+HO4 +0yGHorESufsVKrMc8O5MItICObzxdfdvtLsSoD7Mse7voHdbPjxNfXFXQXLP+i8 -----END CERTIFICATE-----Generated at Thu Jan 8 23:54:37 2026 by rpki-client